Privacy Policy

This policy explains which personal data is processed when you visit marcosmesser.com and why. It follows the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU General Data Protection Regulation (GDPR).

Controller

In short

• No cookies, no advertising, no tracking across sites.
• No contact forms; there is nothing on this site you can sign up for.
• Fonts and images are served from this domain, not from third parties.
• Visitor statistics are collected without cookies.

Hosting and server logs

The website is hosted on Cloudflare Pages by Cloudflare, Inc. (USA). To deliver pages and protect the site against abuse, Cloudflare processes the technical data your browser sends with every request: IP address, date and time, requested URL, referrer, and user agent. A small edge function reads the Accept and User-Agent headers of requests to the home page only to decide whether to answer with HTML, Markdown, or plain text (for example for curl). It does not store them.

The legal basis is my legitimate interest in running a secure, working website. See Cloudflare's privacy policy for details.

Visitor statistics

The site uses Cloudflare Web Analytics to count page views and measure loading performance. It sets no cookies, uses no local storage, and does not fingerprint or follow you across websites. Only aggregated figures, such as page views per page, referrer, country, and browser, are kept.

GitHub contribution calendar

The contribution calendar on the home page is loaded from this website's own endpoint (/api/activity). The server fetches my public contribution data from GitHub and caches it; your browser does not connect to GitHub, and no data about you is passed on.

Theme preference

If you switch between light and dark mode, the choice is saved in your browser's local storage under the key theme. It never leaves your device and you can delete it at any time in your browser settings.

Email

If you write to contact@marcosmesser.com, I use your address and message only to reply to you. I delete the correspondence once it is no longer needed, unless I have to keep it by law.

External links

Links to GitHub, LinkedIn, Mastodon, and other sites take you to services with their own privacy policies. Nothing is loaded from them until you follow a link.

Transfers abroad

Cloudflare may process data in the USA and other countries. Cloudflare is certified under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks and uses standard contractual clauses for other transfers.

Your rights

You can ask what personal data about you I process, and have it corrected or deleted. You may also object to processing. Write to the address above. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, to the data protection authority of your country.

Changes

I update this policy when the website changes how it handles data. The date at the top shows the current version.